In short
- No sign-up: online play uses an automatic guest account linked to your device. A display name and avatar are optional.
- Our game server (Nakama, hosted in Germany) stores your profile, XP and level, match history, coin balance and coin history, leaderboard entries, friends list, chat messages and your push-notification token.
- Friends can see when you are online. In-match chat is filtered for bad language, and players under 13 cannot use chat.
- Push notifications are delivered through Google Firebase Cloud Messaging. You can turn them off in the game or in Android settings.
- Ads are provided by Google AdMob, which may use your advertising ID, IP address and device information. Where the law requires it (EEA, UK, Switzerland) we ask for your consent first — change it any time in Settings → Privacy options.
- There are no in-app purchases. We never sell your personal data.
- Deleting your account (Settings → Delete account) deletes all of this from our server — see Delete account & data.
Who we are
Nard Vex (the “App”) is published by Vex Games, a brand of VEXAGENCY LLC (a Kentucky (USA) limited liability company), address: 271 W Short St Ste 410, Lexington, KY 40507-1213, United States (“we”, “us”). We are the controller of the personal data described in this policy. Contact: support@vex.games.
Data we process when you play online
Offline modes work without an account. When you use online features, the App automatically creates a guest account on our game server, and we process:
- Guest account ID — a random identifier linked to an ID generated on your device, so we can recognise your account without a password;
- Profile — your optional display name and the avatar you choose; other players can see them;
- Year of birth — asked once (age gate) so we can apply age-based restrictions such as disabling chat for players under 13;
- Progress and stats — XP, level, wins, losses, scores and your entries on global leaderboards;
- Match history — matches played, opponents, moves, results and times, used to run matches, resolve disputes and detect cheating;
- Wallet and coin history — your virtual coin balance and a log of every coin change (daily reward, rewarded ad, match entry fee, prize, refund). Coins have no real-money value;
- Friends and presence — your friends list, friend requests, private-room invites and whether you are currently online;
- Chat messages and emotes sent during matches;
- Push-notification token — an identifier from Firebase Cloud Messaging that lets us send notifications to your device;
- Rewarded-ad confirmations — a transaction ID and your user ID that Google AdMob sends to our server when you finish a rewarded ad, so we can credit your coins;
- IP address and connection data — to connect you to the server, prevent abuse and keep the service secure.
We do not ask for your real name, email address, phone number, contacts, photos or precise location.
Data stored on your device
Settings (sound, language, board theme), offline progress, unlocked items and your consent choices are saved locally on your device. They are removed when you uninstall the App or clear its storage.
Our game server
Online features run on a game server based on Nakama (open-source software by Heroic Labs). We operate the server ourselves; it is hosted in a data centre in Germany (European Union) by Contabo GmbH (Germany), which processes data only on our instructions. All connections between the App and the server are encrypted (HTTPS/TLS).
Friends, chat and moderation
You can add friends, see which friends are online and invite them to private rooms. Your display name, avatar, level and online status are visible to your friends and to players you meet in matches.
During matches you can send short text messages and emotes. Messages are automatically filtered for profanity. Players who indicate in the age gate that they are under 13 cannot send or read chat messages.
To keep the game safe, we may review messages that were reported by other players or flagged by our filters, and we may suspend accounts for abusive behaviour (see the Terms of Service). Do not share personal information in chat.
Push notifications (Google Firebase Cloud Messaging)
If you allow notifications, the App receives a push token from Google Firebase Cloud Messaging (FCM), which we store on our server together with your account. Notifications are delivered through Google’s FCM service, which processes the token and the notification on our behalf.
We send notifications about friend requests, room invites, turn reminders during online matches, when your daily reward is ready, and a reminder if you have not played for 3 days. You can turn notifications off at any time in the App’s settings or in Android Settings → Apps → Nard Vex → Notifications. See the Firebase privacy information.
Advertising (Google AdMob)
The App is free and shows ads from Google AdMob (Google LLC / Google Ireland Limited). The Google Mobile Ads SDK may collect your device’s advertising ID, IP address (used to estimate general location), device information such as model, OS version and language, ad interactions and diagnostic data, and may use cookies or similar identifiers. Google uses this data to show and measure ads, limit repetition, prevent fraud and — with your consent where required — personalise ads. Google acts as an independent controller; see How Google uses information from sites or apps that use its services.
Coins can be earned by watching optional rewarded ads. When you finish one, Google AdMob sends a signed confirmation to our server (server-side verification) containing a transaction ID and your user ID, so we can credit the coins and prevent fraud. Watching ads is always your choice.
Consent and Privacy options
In the EEA, the UK and Switzerland, and wherever the law requires it, the App shows a consent message from Google’s User Messaging Platform (UMP) before personalised ads are used. If you decline, you may still see non-personalised ads. You can change your choice at any time in Settings → Privacy options. You can also delete or reset your advertising ID in your Android settings (Privacy → Ads).
Legal bases (GDPR)
- Contract (Art. 6(1)(b)) — to create your guest account and provide online play, friends, chat, leaderboards, coins and the notifications you asked for;
- Legitimate interests (Art. 6(1)(f)) — to keep the game secure, moderate chat, prevent cheating, fraud and abuse, fix bugs, send reminders (which you can turn off) and show non-personalised ads that fund the free game;
- Consent (Art. 6(1)(a)) — for personalised ads, for notification permission on your device and for storing or accessing information on your device where required; you can withdraw it at any time;
- Legal obligation (Art. 6(1)(c)) — where the law requires us to keep or disclose data, for example the age-based protection of children.
Sharing and international transfers
We do not sell your personal data. We share it only with: our hosting provider Contabo GmbH (Germany) (game server in Germany); Google Firebase Cloud Messaging (delivery of notifications, on our behalf); Google AdMob and its User Messaging Platform (ads, consent and rewarded-ad verification, as described above); and authorities when required by law. Your display name, avatar, level, leaderboard entries and, for friends, your online status are visible to other players; chat messages are visible to the players in the match. Our company is based in the United States and Google may process data in the US and other countries. For transfers of data from the EEA, the UK or Switzerland we rely on appropriate safeguards, such as the EU–US Data Privacy Framework where applicable or the European Commission’s standard contractual clauses.
Retention
- Account, profile, year of birth, XP, wallet, coin history, match history, friends, leaderboard entries and push token: kept while your account is active; accounts not used for 24 months are deleted automatically.
- Chat messages: kept for up to 30 days (so reports can be reviewed) and then deleted; reported messages may be kept for up to 90 days while a report is handled.
- After you delete your account, all of the above is removed from the live server within 30 days and from backups within a further 30 days.
- Server logs with IP addresses and rewarded-ad confirmations: kept for up to 30 days, unless needed longer to investigate fraud or abuse.
- Data on your device: until you uninstall the App or clear its storage.
Deleting your account
You can delete your account at any time in the App (Settings → Delete account) or by emailing support@vex.games with the player ID shown in Settings. Deletion removes your profile, wallet and coin history, match history, friends list and invites, chat messages, leaderboard entries and push tokens. Details: Delete account & data.
Children
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13 beyond what the US Children’s Online Privacy Protection Act (COPPA) allows. The App asks for your year of birth before online features are used; players who indicate they are under 13 cannot use chat. If we learn that a child under 13 has provided personal information without a parent’s consent, we will delete it — parents or guardians can contact us at support@vex.games. Where a higher minimum age applies for consenting to online services in your country (for example in some EU countries), younger users should use online features only with a parent’s permission.
Your rights
Depending on where you live, you have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time. To use these rights, email support@vex.games with your player ID. You may also complain to your local data protection authority.
US privacy rights (California and other states)
If you live in California or another US state with a consumer privacy law (such as the CCPA as amended by the CPRA), you have the right to know what personal information we collect and why, to access, correct or delete it, to opt out of its “sale” or “sharing”, and not to be treated differently for using these rights. The categories of personal information we process, their sources and purposes are listed above.
We, the developer, do not sell personal information and do not share it for cross-context behavioral advertising. Google AdMob may use device identifiers (such as your advertising ID) to show ads, which some state laws may treat as “sharing”. You can opt out at any time through the consent message and Settings → Privacy options where available, or by deleting your advertising ID in Android settings.
To make a request, email support@vex.games (include your player ID if you have one). We will verify your request and reply within 45 days. You may also use an authorized agent.
Security
We use encrypted connections, access controls and regular updates to protect data. No system is completely secure, but we work hard to protect your information.
Changes
We may update this policy. The new version will be published on this page with a new effective date; for important changes we will also inform you in the App.
Contact
VEXAGENCY LLC (Vex Games)
271 W Short St Ste 410, Lexington, KY 40507-1213, United States
Email: support@vex.games
Website: vex.games